From 173804ad8a4afd31ec7a1b23dbe5488a2b7e94fc Mon Sep 17 00:00:00 2001 From: Krishna Chaitanya Reddy Burri Date: Fri, 23 May 2025 18:17:28 +0530 Subject: [PATCH] Add aws.config source indices to kibana_system role permissions (#128350) Adding `logs-aws.config-*` data stream indices to the `kibana_system` privileges. This is required for the latest transform to work. Related: - https://github.com/elastic/integrations/pull/13830#discussion_r2100362326 (cherry picked from commit 169527ff6cf4976d7b30dfbf221565a46cc7c649) --- .../security/authz/store/KibanaOwnedReservedRoleDescriptors.java | 1 + .../xpack/core/security/authz/store/ReservedRolesStoreTests.java | 1 + 2 files changed, 2 insertions(+) diff --git a/x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/store/KibanaOwnedReservedRoleDescriptors.java b/x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/store/KibanaOwnedReservedRoleDescriptors.java index b2eceb6c20ed6..00cf0dd4d708d 100644 --- a/x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/store/KibanaOwnedReservedRoleDescriptors.java +++ b/x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/store/KibanaOwnedReservedRoleDescriptors.java @@ -470,6 +470,7 @@ static RoleDescriptor kibanaSystem(String name) { "logs-aws.securityhub_findings-*", "logs-aws.securityhub_findings_full_posture-*", "logs-aws.inspector-*", + "logs-aws.config-*", "logs-amazon_security_lake.findings-*", "logs-qualys_vmdr.asset_host_detection-*", "logs-tenable_sc.vulnerability-*", diff --git a/x-pack/plugin/core/src/test/java/org/elasticsearch/xpack/core/security/authz/store/ReservedRolesStoreTests.java b/x-pack/plugin/core/src/test/java/org/elasticsearch/xpack/core/security/authz/store/ReservedRolesStoreTests.java index 84ea18495378f..1f07a32b0de78 100644 --- a/x-pack/plugin/core/src/test/java/org/elasticsearch/xpack/core/security/authz/store/ReservedRolesStoreTests.java +++ b/x-pack/plugin/core/src/test/java/org/elasticsearch/xpack/core/security/authz/store/ReservedRolesStoreTests.java @@ -1644,6 +1644,7 @@ public void testKibanaSystemRole() { "logs-aws.securityhub_findings-" + randomAlphaOfLength(randomIntBetween(0, 13)), "logs-aws.securityhub_findings_full_posture-" + randomAlphaOfLength(randomIntBetween(0, 13)), "logs-aws.inspector-" + randomAlphaOfLength(randomIntBetween(0, 13)), + "logs-aws.config-" + randomAlphaOfLength(randomIntBetween(0, 13)), "logs-amazon_security_lake.findings-" + randomAlphaOfLength(randomIntBetween(0, 13)), "logs-qualys_vmdr.asset_host_detection-" + randomAlphaOfLength(randomIntBetween(0, 13)), "logs-tenable_sc.vulnerability-" + randomAlphaOfLength(randomIntBetween(0, 13)),